CVE-2013-2338

Name: CVE-2013-2338
Creator: NVD / NIST
Published: 2013-06-14T19:55:01.14+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 10.72%

Last modified Jun 16, 2026

CVE-2013-2338 is a vulnerability of currently unknown severity. Unspecified vulnerability on HP Integrated Lights-Out 3 (aka iLO3) cards with firmware before 1.57 and 4 (aka iLO4) cards with firmware before 1.22, when Single-Sign-On (SSO) is used, allows remote attackers to execute arbitrary code via unknown vectors.. EPSS estimates a 10.72% chance of exploitation in the next 30 days.

Description

Unspecified vulnerability on HP Integrated Lights-Out 3 (aka iLO3) cards with firmware before 1.57 and 4 (aka iLO4) cards with firmware before 1.22, when Single-Sign-On (SSO) is used, allows remote attackers to execute arbitrary code via unknown vectors.

Metrics

EPSS Probability

10.72%

95.2th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Vendor	Product	Versions
Hp	Integrated Lights-Out 3 Firmware	<= 1.55
Hp	Integrated Lights-Out 3 Firmware	1.00
Hp	Integrated Lights-Out 3 Firmware	1.05
Hp	Integrated Lights-Out 3 Firmware	1.20
Hp	Integrated Lights-Out 3 Firmware	1.26
Hp	Integrated Lights-Out 3 Firmware	1.28
Hp	Integrated Lights-Out 3 Firmware	1.50
Hp	Integrated Lights-Out 4 Firmware	<= 1.20
Hp	Integrated Lights-Out 4 Firmware	1.11
Hp	Integrated Lights-Out 4 Firmware	1.13

References

https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03787836Vendor Advisory
https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03787836Vendor Advisory

Timeline

Published: Jun 14, 2013
Last Modified: Jun 16, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2013-2338?

How severe is CVE-2013-2338?

Severity scoring for CVE-2013-2338 is pending analysis. The EPSS model estimates a 10.72% probability of exploitation in the next 30 days.

How do I fix CVE-2013-2338?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2013-2338?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST